Kernel Mode Vulnerability in NVIDIA Quadro, NVS, and GeForce Products
CVE-2016-7391

7.8HIGH

Key Information:

Vendor

Nvidia
Status
Quadro, Nvs, And Geforce (all Versions)
Vendor
CVE Published:
8 November 2016

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2016-7391?

The NVIDIA Windows GPU Display Driver for Quadro, NVS, and GeForce products contains a vulnerability in the kernel mode layer (nvlddmkm.sys) due to a missing array bounds check in the handler for DxgDdiEscape ID 0x100010b. This flaw could permit an attacker to write to kernel memory, potentially allowing for denial of service or escalation of privileges in the affected versions of the driver.

Affected Version(s)

Quadro, NVS, and GeForce (all ) Quadro, NVS, and GeForce (all versions)

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2016-7391 - Proof of Concept

References

https://support.lenovo.com/us/en/solutions/LEN-10822
x_refsource_CONFIRM
http://nvidia.custhelp.com/app/answers/detail/a_id/4247
x_refsource_CONFIRM
http://www.securityfocus.com/bid/93987
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.